CVE-2003-1238

Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:nuked-klan:nuked-klan:1.2:*:*:*:*:*:*:*
cpe:2.3:a:nuked-klan:nuked-klan:1.2_beta:*:*:*:*:*:*:*
cpe:2.3:a:nuked-klan:nuked-klan:1.3:*:*:*:*:*:*:*
cpe:2.3:a:nuked-klan:nuked-klan:1.3_beta:*:*:*:*:*:*:*

History

20 Nov 2024, 23:46

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html - Exploit () http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html - Exploit
References () http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html - Exploit () http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html - Exploit
References () http://www.iss.net/security_center/static/11420.php - () http://www.iss.net/security_center/static/11420.php -
References () http://www.securityfocus.com/bid/6916 - Exploit () http://www.securityfocus.com/bid/6916 - Exploit

Information

Published : 2003-12-31 05:00

Updated : 2024-11-20 23:46


NVD link : CVE-2003-1238

Mitre link : CVE-2003-1238

CVE.ORG link : CVE-2003-1238


JSON object : View

Products Affected

nuked-klan

  • nuked-klan